Read the docs
Red Hat Security Advisory

RHSA-2026:80798

glibc security update

Released 2026-10-12 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 4 records

TI-2026-55525 CVE-2026-80489 · GHSA-w45w-pf39-v4pp

EUC_JISX0213 decoding may hang on crafted input

Priority LOW 26

Converting crafted EUC_JISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.3 to 2.44 may result in the converter making no progress, causing the calling…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00358 Published 2026-09-15 Partial fix CWE-835
TI-2026-53861 CVE-2026-77117 · GHSA-g8c6-x9r9-wj7f

SHIFT_JISX0213 decoding may hang on crafted input

Priority LOW 26

Converting crafted SHIFT_JISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.3 to 2.44 may result in the converter making no progress, causing the calli…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00358 Published 2026-09-15 Partial fix CWE-835
TI-2026-15896 CVE-2026-19542 · GHSA-hhcv-vc8h-vmrg

Stack-based out-of-bounds write in tdelete during tree rebalancing

Priority LOW 25

Calling tdelete on a sufficiently deep tree in the GNU C Library version 2.1 to 2.44 may write one pointer past the end of an alloca-allocated array on the stack, which may crash the application.

CVSS 3.1MEDIUM 5.6 Network No auth No interaction EPSS 0.00226 Published 2026-09-14 Partial fix CWE-121
TI-2026-15108 CVE-2026-18374 · GHSA-qg52-8pr2-xj9v

Out-of-bounds write in GNU glibc

Priority LOW 21

Passing an effectively empty string to the `,ccs=` syntax extension of the mode argument in the `fopen` function in the GNU C Library version 2.45 or earlier may result in a heap buffer overflow when the mode string inpu…

CVSS 3.1MEDIUM 4.9 Local No auth No interaction EPSS 0.00144 Published 2026-08-27 Partial fix · 2.45 CWE-787